Cyber Threat Defense Sr AI/ML Engineer

Bank of America • Jersey City, NJ

2d • $145,000 - $192,500 • Onsite

About The Position

Bank of America’s Global Information Security team is seeking a senior individual contributor to build and integrate AI and machine learning capabilities into its cyber defense ecosystem. The role combines hands-on engineering and technical leadership to advance preventative, detective, and responsive security controls using deterministic and scripted automation, custom machine learning models, large language models, and agentic AI systems. The engineer will apply AI to defend against modern threats, including threats that use AI, and work with security subject matter experts on protecting the bank’s own use of AI.

The position calls for an experienced AI/ML engineer with strong machine learning fundamentals and production engineering discipline, along with a working understanding of cybersecurity. The engineer will collaborate with Global Information Security operational, technical, and offensive security teams, contribute to scalable and well-governed AI architecture, and advise senior leadership while mentoring engineers and analysts.

The role is based at one of the listed Bank of America offices in Denver, Washington, Chicago, Boston, or Jersey City. The bank states that it is committed to an in-office culture with role-specific flexibility. The position is on first shift and is scheduled for 40 hours per week. The annualized salary range is $145,000 to $192,500, with offers determined by experience, education, and skill set. The role is eligible for an annual discretionary incentive plan and benefits, including access to paid time off.

Requirements

• At least 7 years of hands-on machine learning engineering experience, including fine-tuning, evaluating, and deploying custom models in production.
• Strong command of machine learning fundamentals, including model training and evaluation, model weights, loss functions, precision, recall, F1, calibration, feature engineering, and embeddings.
• Experience addressing real-world data issues such as class imbalance, label noise, and model drift; candidates should be able to discuss models they personally trained and evaluated.
• Proficiency in Python and hands-on experience with ML frameworks such as PyTorch or scikit-learn, including model evaluation harnesses and experiment tracking.
• Hands-on experience building LLM-powered applications and agentic AI systems, such as retrieval-augmented generation, fine-tuning, tool use, and orchestration.
• Experience delivering production systems at scale involving data pipelines, model deployment, MLOps, and automation.
• Experience with enterprise cloud AI development platforms such as Azure AI Foundry, Amazon Bedrock, or Google Cloud Vertex AI, or equivalent open-source or self-hosted model infrastructure.
• Working understanding of cybersecurity fundamentals, including the attack lifecycle, common attacker techniques, defensive controls, and how AI can enhance defensive operations.
• Familiarity with AI governance and model risk management concepts, including model validation, explainability, and responsible AI.
• Strong communication and presentation skills, including translating complex technical concepts for senior executives and cross-functional stakeholders.
• Bachelor’s degree in computer science, a related quantitative field, or equivalent applied experience.

Nice To Haves

• Advanced degree (MS/PhD).
• Experience applying ML or AI to cybersecurity problems such as detection engineering, threat hunting, malware analysis, or security automation.
• Experience working with security telemetry at scale, such as EDR, SIEM, network, or identity data.
• Understanding of offensive security tactics and threat actor behaviors, and how AI can enhance red teaming, attack path mapping, and threat modeling.
• Hands-on offensive security experience, such as CTF competitions, red team tooling development, or published security research.
• Experience with the open-source LLM ecosystem, such as Hugging Face or LangChain, LLM guardrails, and agent orchestration frameworks.
• Familiarity with adversarial machine learning and AI security risks.
• Experience with AI-enhanced SOAR (Security Orchestration, Automation, and Response) platforms.
• Prior work in regulated industries, including model risk and compliance considerations in financial services.

Responsibilities

• Design, build, and deploy AI-powered capabilities for threat hunting, anomaly detection, and automated incident response over large-scale security telemetry.
• Develop and operationalize custom machine learning models and LLM-based workflows for cybersecurity, owning the lifecycle from data preparation and feature engineering through training, evaluation, deployment, and monitoring.
• Select deterministic automation, classical machine learning, generative AI, or a combination based on problem structure, available data, and operational risk.
• Build LLM-based tools that improve analyst effectiveness, including investigation support, detection engineering assistance, and knowledge retrieval.
• Partner with Global Information Security operational and technical teams to identify AI-driven improvements to security controls and architecture.
• Prototype and evaluate emerging AI technologies for cyber threat detection and response.
• Collaborate with offensive security teams to develop AI-enhanced red teaming and adversarial emulation capabilities.
• Contribute to architectural decisions supporting scalable, well-governed AI integration across Global Information Security controls.
• Promote responsible and ethical AI use in security operations and work with model governance stakeholders on bias mitigation and explainability.
• Serve as a technical expert on AI-driven cybersecurity initiatives, advise senior leadership, and mentor engineers and analysts.

Benefits

• Industry-leading benefits.
• Access to paid time off.
• Annual discretionary incentive plan eligibility, with awards based on individual performance and behaviors, line-of-business or group contributions, and overall company success.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior